» mediaget_id4897060ids2s.exe
Overview
Analysis
File Details
Downloads (51)

mediaget_id4897060ids2s.exe

mediaget-installer Module

Banner LLC

The application mediaget_id4897060ids2s.exe, “MediaGet installer” by Banner has been detected as a potentially unwanted program by 12 anti-malware scanners. This is a setup and installation application and has been known to bundle potentially unwanted software. The file has been seen being downloaded from sub2.bubblesmedia.ru and multiple other hosts.

File name:

Publisher:

MediaGet LLC (signed by Banner LLC)

Product:

mediaget-installer Module

Description:

MediaGet installer

Version:

1.0

MD5:

e17503981b142a19fe381331527bbbd5

SHA-1:

62efc9200c5917885e090f98c5f4a899ac58dcb4

SHA-256:

20fce8c5c631b9d2ab2c8c150e41c0c7dbb773e4e5900c7fbd56a3d71612bf38

Scanner detections:

12 / 68

Status:

Potentially unwanted

Analysis date:

4/27/2024 12:44:43 AM UTC (today)

Scan engine

Detection

Engine version

Avira AntiVirus

APPL/MediaGet.Gen5

7.11.150.74

AVG

Banne

2015.0.3470

Dr.Web

Program.MediaGet.21

9.0.1.0138

ESET NOD32

Win32/MediaGet (variant)

8.9817

G Data

Win32.Adware.MediaGet

14.5.24

Kaspersky

not-a-virus:Downloader.Win32.MediaGet

14.0.0.3846

Malwarebytes

PUP.Adware.MediaGet

v2014.05.18.08

McAfee

Artemis!E17503981B14

5600.7126

Reason Heuristics

Optional.MediaGetApp.Installer.X

14.5.18.20

Sophos

MediaGet

4.98

Trend Micro House Call

TROJ_GEN.F47V0516

7.2.138

VIPRE Antivirus

Trojan.Win32.Generic

29352

File size:

654.5 KB (670,240 bytes)

Product version:

1.0

Original file name:

mediaget-installer.exe

File type:

Executable application (Win32 EXE)

Common path:

C:\users\{user}\downloads\mediaget_id4897060ids2s.exe

Digital Signature

Signed by:

Banner LLC

Authority:

COMODO CA Limited

Valid from:

3/26/2014 3:00:00 AM

Valid to:

3/26/2017 2:59:59 AM

Subject:

CN=Banner LLC, O=Banner LLC, STREET="lit.A, pom. 7N, 21 Serebristy bul.", L=St.Petersburg, S=Russia, PostalCode=197341, C=RU

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

75D61BEBB47652BF2C5DF2DDF44F0E3A

File PE Metadata

Compilation timestamp:

5/16/2014 12:55:34 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

12288:qaZ0kMGzMG35xHHNL82bjlga7Ke5ebBdqtvtRSKxwjeO/xOJOsg6NSTEPVM:qXswoXp82NjKeEbBkNtRSKxw8McSeM

Entry address:

0x15ED50

Entry point:

60, BE, 00, 90, 50, 00, 8D, BE, 00, 80, EF, FF, 57, EB, 0B, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B... 
[+]

Packer / compiler:

UPX v0.89.6 - v1.02 / v1.05 -v1.24

Code size:

344 KB (352,256 bytes)

The file mediaget_id4897060ids2s.exe has been seen being distributed by the following 50 URLs.

http://sub2.bubblesmedia.ru/go/?link=/Hi bTVkp uHxixma1dxwqHHglfqzgUxtDlwOr4vTmIwXuwLpg5IPFCT/Y4OpeH47b6wAS62uAbULERpKvdM9UONvfWms9u4mG6NYYl7zRQg1IcJE0Ui1u6ikS57qzfLc2cPdCStH6VrtqHpn/3n/tHVD6Dq/lG5ZFO/.../wZB&param=afBqAQMae54=&rid=1041&s=300 ??????????: ??????? ??????? ???????? ?????? ?????????. ??? 2013. ???????????? ???????? 300: Ri e of an Empire. 138148&r=seria-online.ru&f=300 ??????????: ??????? ??????? ???????? ?????? ?????????. ??? 2013. ???????????? ???????? 300: Ri e of an Empire. 138148&cs=UTF-8&u=

http://sub2.bubblesmedia.ru/go/?link=yoPFRO819wIG4JzH9PpPbgLnoiw86uKmNHB62zCa2tnExCc05O4lPisAryezX5GjMcFpMQHMLtHYj3EQRYzEnU49TTzjNguzYVLXhL0Cdkl0/IFOKeBQu6OdOif4 FU8AQ/h/sqlaWJ4ifvR1uPr5OMiJcIro92eI/i zSXxjtmjJBDXWLOcP/.../O0etqMrw=&rid=957&s=venus en vivo. &r=telegratis.net&f=venus en vivo. &cs=UTF-8&u=

http://mediaget.com/torrent.php?r=filmifullizlehdtr.com&s=407 Dark Flight 3D izle – Türkçe Altyazili Tek Parça Filmi full HD izle,Tr dublaj&f=407 Dark Flight 3D izle – Türkçe Altyazili Tek Parça Filmi full HD izle,Tr dublaj

http://ld.mediaget.com/index2.php?l=ru&u=http://manytorrents.org/.../0-0-0-6458-20&r=manytorrents.org&f=terraria-v112-2011&bbls_client_id=49823657&bbl=1

http://sub2.bubblesmedia.ru/sb/clk/s/1366/o/145/p/1294/.../0?a=1

http://sub2.bubblesmedia.ru/go/?link=UTFAqxaWaIaHQOX7I7Dt0bBagxWjniOeMOsLfyaoZ/.../zSd8mZ4yNSmMep uOrJHjdC9Y9vcTF9EdIS6IRQk6K58fC2z1L1ikyp2 EA4cJm4rHinkSOutwEKELZsxmbg KpBW2jHVkKRRjkMthnffDd6SuOWgos&param=XLWEOgTF3nA=&rid=1838&s=Atlikarinca 2011 (Yerli Film) Dvdrip XviD tek link full film indir&r=filminndir.org&f=Atlikarinca 2011 (Yerli Film) Dvdrip XviD tek link full film indir&cs=UTF-8&u=&fu=

http://sub2.bubblesmedia.ru/go/?link=yBysCZzGjDGebnO/.../WOKuGdsE=&param=Dz GgGhydP4=&rid=1482&s=Left 4 Dead 2 - 2009 - Full - Oyun indir - Download - Y?kle - Full Oyun indir Download&r=fulloyun.com&f=Left 4 Dead 2 - 2009 - Full - Oyun indir - Download - Y?kle - Full Oyun indir Download&cs=windows-1254&u=&fu=

http://sub2.bubblesmedia.ru/go/?link=l3vaYNN7iCV8LYzxxHL1YKYF1qPD439VCr YPQqxLTA1Q96nEJnI2XixaWMuDTwDEFNBEV2blVgIiYZgU6KAYv yvrz Tfdgr67mXcdW6pKqn7cLhtNP8e2WdVNTsVRhpE/.../BaoEIOBIXXX3xSqAoxPH4RKryzVRAu2077MJ4=&param=AHTBCltIcOo=&rid=1059&s=??????? ?????? ??????? ???????? ??????&r=multzona.org&f=??????? ?????? ??????? ???????? ??????&cs=windows-1251&u=

http://ld.mediaget.com/index2.php?r=CBN_728_blue_orange

http://torr.mediaget.com/torr.php?r=fileindir.com13&s=Kötü Komsular (Neighbors) – 2014 | Yerli Sinema izle, &f=Kötü Komsular (Neighbors) – 2014 | Yerli Sinema izle,

http://ld.mediaget.com/index2.php?r=advmaker300_smotret

http://ineedfile2.com/.../adv_media.php?f_name=Wilcom Decostudio e1.rar

http://sub2.bubblesmedia.ru/go/.../5Wav9053VxiMptROxyWLC4=&param=QkaOkrlCq5c=&rid=1059&s=??????? ?????? 3D ???????? ??????&r=multzona.org&f=??????? ?????? 3D ???????? ??????&cs=windows-1251&u=

http://n-torrents.ru/go?http://media-get.ru/torrent.php?r=beemoporgru&u=http://n-torrents.ru/_ld/129/.../XBOX)

http://sub2.bubblesmedia.ru/go/?link=9 OhU0jr12PAFs/8zx8ACQ8mU6RzbYBEHbDTruZsQ9U3wqZONDwfvB p/.../EdYqsEdj2cDNRjTAvs0GoMBZsLU7ke&param=YchtoSgooUA=&rid=1183&s=&r=psp-torrent.com&f=&cs=windows-1251&u=

http://sub2.bubblesmedia.ru/go/?link=XTvNU7hw0rG62WBzqeHuu0XTrHHh1PbKvZYsrPU6HtyqCULk8DRDY Jom1ysVOqa1QWZKJcBOc7ieLTBwruPxgLN/Nu50YrPnwvvILTPMoPOIhfikGKYk G/RN/.../03Ip3JyBtHTQCIGJURU1A=&param=qi5Z2k8WosU=&rid=1059&s=??????? ??? ????????? ??????? 2 ???????? ??????&r=multzona.org&f=??????? ??? ????????? ??????? 2 ???????? ??????&cs=windows-1251&u=

http://torr.mediaget.com/torr.php?r=fasttorrent&u=http://www.fast-torrent.ru/download/torrent/.../_untik.torrent&f=_untik.torrent

http://sub2.bubblesmedia.ru/go/?link=ZL4oAhHXyBuqfX4WFtr jg77 Dhbcn7jVoIRM4eV1iKHkMQz7rNaIQs7ZqotBMghNTGosQO/SFjy0xvM8Fd/hw037uqzBcj2PAsRpBtTvFiJ57O7qFVWM5AC1ik/.../Luaj kEVH6bqTjhDelKuP2 kQWezuIbveqHgHO1zuPRTUsg tZ&param=JRZzvE77ATc=&rid=1749&s=??????? [720x400] ????? ???????-???? 2: ??????? ?????????? ??? ?????????? ?????????&r=torrent-mob.at.ua&f=??????? [720x400] ????? ???????-???? 2: ??????? ?????????? ??? ?????????? ?????????&cs=UTF-8&u=&fu=

http://sub2.bubblesmedia.ru/go/.../en3QjIUv9BkPX8rpwxewl8qXb uR0EOzxVHZ92NE3PT8X14tLmeHA==&param=fbQLdAFX lY=&rid=991&s="????? ? ?????? 2" ????? ??????????? - 19 ??? 2014&r=nowfilms.ru&f="????? ? ?????? 2" ????? ??????????? - 19 ??? 2014&cs=windows-1251&u=

http://ld.mediaget.com/index2.php?l=de&r=gameupdates.org&bbls_client_id=48977262

http://mg.bubblesmedia.ru/index.php?redirect_url=http://.../index2.php?l=de&r=gameupdates.org

http://mediaget.com/torrent.php?r=gameupdates.org&s=S.T.A.L.K.E.R.: Lost Alpha by dez&f=S.T.A.L.K.E.R.: Lost Alpha by dez&cs=UTF-8

http://ld.mediaget.com/index2.php?l=en&r=fileindir.com8&f=snrszlar-kulub-filmi-izle-dallas-buyers-club-trke-altyazl-2013-&s=Sinirsizlar Kulubü filmi izle - Dallas Buyers Club Türkçe Altyazili ( 2013 ) &bbls_client_id=51172833

http://mg.bubblesmedia.ru/index.php?redirect_url=http://.../index2.php?l=en&r=fileindir.com8&f=snrszlar-kulub-filmi-izle-dallas-buyers-club-trke-altyazl-2013-&s=Sinirsizlar Kulubü filmi izle - Dallas Buyers Club Türkçe Altyazili ( 2013 )

http://torr.mediaget.com/torr.php?r=fileindir.com8&s=Sinirsizlar Kulubü filmi izle - Dallas Buyers Club Türkçe Altyazili ( 2013 ) &f=Sinirsizlar Kulubü filmi izle - Dallas Buyers Club Türkçe Altyazili ( 2013 )

http://ld.mediaget.com/index2.php?l=ru&r=big-serial.net&f=u0421u0435u0440u0456u0430u043b-u0414u0443u0440u043du0430-u043au0440u043eu0432-/.../ ?????? ????? (2013) - ?????? ???????? ????????&bbls_client_id=47778500&bbl=1

http://torr.mediaget.com/torr.php?rid=1623&s=?????? ????? ???? /.../ ?????? ????? (2013) - ?????? ???????? ????????&cs=UTF-8&u=&fu=&bbl=1&bbls_client_id=47778500

http://sub2.bubblesmedia.ru/go/?link=FRK5ytu7R5quA/H6E SwIsNejMyYAYjn3j9009HTM3see1OAtiMVTobFLr6 GJJ7z/YZUghYn30w5FthCfc15l VDroqfRyLSBpFMm8VliJrXF/jSR0vxFrgRsy2n 2ttZEH0Ho11YNtZyHQ38XQNlaCzhmLRSkqUcGC6mMtevldtvbvHGfxgVpoVnU=&param=fJf4HbzR 2w=&rid=1623&s=?????? ????? ???? /.../ ?????? ????? (2013) - ?????? ???????? ????????&cs=UTF-8&u=&fu=

http://ld.mediaget.com/index3.php?reinstall=true&os=windows&bbls_client_id=50765951

http://mediaget.com/download.php?os=windows

Latest 30 of 51 download URLs

Remove mediaget_id4897060ids2s.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.